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AMENDMENTS TO THE CLAIMS 

1 . (Previously presented) A method of guaranteeing failure notification in a 
distributed system operating on a plurality of nodes in a network, the method comprising: 

creating a failure notification group comprising the plurality of nodes, wherein the failure 
notification group has a unique identifier; 

associating with the unique identifier of the failure notification group a failure handling 
method of a distributed application running on some or all of the nodes of the failure notification 
group; 

ascertaining a failure; and 

when the failure is ascertained, signaling a failure notification to each node in the failure 
notification group and executing the failure handling method to perform an application level 
action. 

2. (Original) The method of claim 1, further comprising disassociating the failure 
handling method from the unique identifier after the failure is ascertained and the failure 
handling method has been executed. 

3. (Original) The method of claim 1, wherein creating a failure notification group 
includes: 

verifying that each node in the failure notification group exists; and 
generating the unique identifier for the failure notification group if each node in the 
failure notification group is successfully contacted. 

4. (Original) The method of claim 3, wherein creating a failure notification group 
includes executing the failure handling method if each node in the failure notification group is 
not successfully contacted. 

5. (Original) The method of claim 1, wherein creating a failure notification group 
includes: 
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generating the unique identifier for the failure notification group; 

sending an invitation message containing an application state and the unique identifier to 
each node of the failure notification group; and 

verifying that each member of the failure notification group received the invitation 
message. 

6. (Original) The method of claim 5, further comprising, if any node in the group of 
nodes fails to receive the invitation, 

signaling a failure notification to nodes that already received the invitation message; and 
executing the failure handling method. 

7. (Original) The method of claim 1, wherein signaling a failure notification 
includes sending a failure notification message to nodes in the failure notification group. 

8. (Original) The method of claim 1, wherein signaling a failure notification 
includes failing to respond to a communication request fi:om a node in the failure notification 
group. 

9. (Original) The method of claim 1, wherein signaling a failure notification 
includes failing to respond only to communication requests related to a failure notification group 
for which a failure has been ascertained. 

10. (Original) The method of claim 1, wherein ascertaining a failure includes 
ascertaining a failure in a communication link to at least one other node in the failure notification 
group. 

1 1 . (Original) The method of claim 1 , wherein ascertaining a failure includes 
receiving from the application an instruction to signal the failure notification. 
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12. (Original) The method of claim 1, wherein ascertaining a failure includes having 
failed to repair the failure notification group one or more times. 

1 3 . (Previously presented) The method of claim 1 , wherein ascertaining a failure 
includes distinguishing between a communication failvire between two nodes that are both in the 
failure notification group and a communication failure between two nodes that are not both in the 
failure notification group. 

14. (Original) The method of claim 1, wherein the failure is ascertained from an 
application pinging each node in the failure notification group, and determining the failure when 
a response to a ping is not received. 

15. (Original) The method of claim 1 , wherein the nodes in the failure notification 

group have a spanning tree topography, wherein the failure is ascertained from an application 
pinging adjacent nodes in the spanning tree, and determining the failure when a response to a 
ping is not received. 

1 6. (Original) The method of claim 1 , wherein the nodes in the failure notification 
group are a subset of nodes in an overlay network, wherein creating a failure notification group 
includes creating a multicast tree by sending a construction message to each node in the failure 
notification group. 

1 7. (Original) The method of claim 16, wherein the construction message is routed to 
each node in the failure notification group through an overlay routing path, and nodes in the 
overlay routing path record pointers to adjacent nodes in the overlay routing path. 

1 8. (Original) The method of claim 16, further comprising receiving a confirmation 
message, wherein the construction message is routed to each node in the failure notification 
group through an overlay routing path, and upon receiving the confirmation message, each node 
in the overlay routing path records a pointer a preceding node, and wherein the confirmation 
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message is routed through the overlay routing path in reverse, and upon receiving the 
confirmation message, each node in the reverse overlay routing path records a pointer to a 
preceding node. 

1 9. (Original) The method of claim 1 6, wherein ascertaining the failure includes 
ascertaining that a communication link to a node in the overlay network has failed, and 
determining whether the node was a member of the multicast tree. 

20. (Original) The method of claim 19, wherein if the node was a member of the 
multicast tree, signaling a failure notification to adjacent nodes in the multicast tree. 

21 . (Original) The method of claim 19, wherein if the node was a member of the 
multicast tree, signaling a failure notification to adjacent nodes in the multicast tree by not 
responding to messages from the adjacent nodes. 

22. (Original) The method of claim 19, wherein if the node was a member of the 
multicast tree, executing the failure handling method. 

23. (Previously presented) A method of guaranteeing failure notification in a 
distributed system operating on a plurality of nodes in a network, the method comprising: 

receiving a unique identifier for a failure notification group, the failure notification group 
comprising the plurality of nodes; 

associating with the unique identifier of the failure notification group a failure handling 
method of a distributed application running on some or all of the nodes of the failure notification 
group; 

ascertaining a failure; and 

when the failure is ascertained, signaling a failure notification to each node in the failure 
notification group and executing the failure handling method to perform an application level 

action. 
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24. (Original) The method of claim 23, further comprising performing garbage 
collection to disassociate the failure handling method from the application state after the failure 
is ascertained and the failure handling method is executed. 

25. (Original) The method of claim 23, wherein signaling a failure notification 
includes sending a failure notification message to nodes in the failure notification group. 

26. (Original) The method of claim 23, wherein signaling a failure notification 
includes failing to respond to a commimication request from a node in the failure notification 
group. 

27. (Original) The method of claim 23, wherein signaling a failure notification 
includes failing to respond to only communication requests related to a failure notification group 
for which a failure has been ascertained. 

28. (Original) The method of claim 23, wherein ascertaining a failure includes 
ascertaining a failure in a communication link to at least one other node in the failure notification 
group. 

29. (Original) The method of claim 23, wherein ascertaining a failure includes 
receiving fi:om the application an instruction to signal the failure notification. 

30. (Original) The method of claim 23, wherein ascertaining a failure includes 
having failed to repair the failure notification group one or more times. 

3 1 . (Original) The method of claim 23, wherein the failure is ascertained from an 
application pinging each node in the failure notification group, and determining the failure when 
a response to a ping is not received. 
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32. (Original) The method of claim 23, wherein the nodes in the failure notification 
group have a spanning tree topology, wherein the failure is ascertained from an application 
pinging adjacent nodes in the spanning tree, and determining the failure when a response to a pin 
is not received. 

33. (Original) The method of claim 23, wherein the nodes in the failure notification 
group are a subset of nodes in an overlay network, further comprising joining a failure 
notification tree, including: 

receiving a construction message from a creator node through an overlay routing path; 

and 

recording a pointer to adjacent nodes in the overlay routing path. 

34. (Original) The method of claim 33, further comprising sending a confirmation 
message to the creator node, wherein the construction message is routed to each node in the 
failure notification group through an overlay routing path, and upon receiving the confirmation 
message, each node in the overlay routing path records a pointer a preceding node, and wherein 
the confirmation message is routed through the overlay routing path in reverse, and upon 
receiving the confirmation message, each node in the reverse overlay routing path records a 
pointer to a preceding node. 

35. (Original) The method of claim 33, wherein ascertaining a failure includes 
distinguishing between a communication failure between two nodes that are both in the failure 
notification group and a communication failure between two nodes that are not both in the failure 
notification group. 

36. (Original) The method of claim 33, wherein ascertaining the failure includes 
ascertaining that a communication link to a node in the overlay network has failed, and 
determining whether the node was a member of the multicast tree. 
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37. (Original) The method of claim 36, wherein if the node was a member of the 
multicast tree, signaling a failure notification to adjacent nodes in the multicast tree. 

38. (Original) The method of claim 36, wherein if the node was a member of the 
multicast tree, signaling a failure notification to adjacent nodes in the multicast tree by not 
responding to messages from the adjacent nodes. 

39. (Original) The method of claim 36, wherein if the node was a member of the 
multicast tree, executing the failure handling method. 

40. (Currently amended) A method of guaranteeing failure notification in a 
distributed system operating on a plurality of nodes in a network, wherein the plurality of nodes 
are a subset of nodes in an overlay network, the method comprising: 

joining a failure notification tree; 

ascertaining a failure in a communication link to an adjacent node in the tree; and 
signaling a failure notification when the failure is ascertained^ 
wherein joining the failure notification tree includes: 

receiving a first message from a creator node of a failure notification group 
through an overlay routing path; 

recording a pointer to an overlay node from which the first message was received; 
forwarding the first message to a node in the failure communication notification 
group via a next node in the overlay routing path; 

receiving a second message from the node in the failure notification group 
through the overlay routing path; 

recording a pointer to an overlay node from which the second message was 

received; and 

forwarding the second message to the creator node via the overlay node from 
which the first message was received. 

41. (Canceled) 
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42. (Previously presented) The method of claim 40, further comprising recording a 

pointer to the next node. 

43. (Canceled) 

44. (Original) The method of claim 40, wherein ascertaining a failure includes 
distinguishing between a commxmication failure between two nodes that are both in the failure 
notification group and a commvmication failure between two nodes that are not both in the failure 
notification group. 

45. (Original) The method of claim 40, wherein ascertaining a failure includes 
having failed to repair the failure notification group one or more times. 

46. (Original) The method of claim 40, wherein ascertaining the failure includes 
ascertaining that a communication link to a node in the overlay network has failed, and 
determining whether the node was a member of the multicast tree. 

47. (Original) The method of claim 46, wherein if the node was a member of the 
multicast tree, signaling a failure notification to adjacent nodes in the multicast tree by not 
responding to messages fi:om the adjacent nodes. 

48. (Previously presented) An application program interface embodied on computer 
readable media, comprising: 

a first fiinction for creating a failure notification group and assigning a imique identifier 
to the failure notification group; 

a second function for associating with the unique identifier a failure handling method of a 
distributed application running on some or all nodes of the failure notification group; and 

a third function for signaling a failure notification to the failure notification group and 
executing the failure handling method to perform an application level action. 
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49. (Original) The application program interface of claim 48, the first function 
comprising a first parameter representing a set of nodes and a second parameter returning the 
unique identifier that is a result of the first function. 

50. (Original) The application program interface of claim 48, the first fimction 
comprising a first parameter representing a set of nodes, a second parameter representing an 
application state, and a third parameter returning the unique identifier that is a result of the first 
fimction. 

5 1 . (Original) The application program interface of claim 48, the second fimction 
comprising a first parameter representing the failure handling method and a second parameter 
representing the unique identifier. 

52. (Original) The application program interface of claim 48, the third fimction 
comprising a first parameter representing the unique identifier. 
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